From 81aa1883fd1016d7dfb147ef9a3baabd44fd2298 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Pedro=20Mart=C3=ADn?= Date: Wed, 20 May 2026 14:10:41 +0200 Subject: [PATCH] docs(multi-tenant): clarify edit/delete organization permission (#11255) --- .../tutorials/prowler-app-multi-tenant.mdx | 13 ++++++++++--- 1 file changed, 10 insertions(+), 3 deletions(-) diff --git a/docs/user-guide/tutorials/prowler-app-multi-tenant.mdx b/docs/user-guide/tutorials/prowler-app-multi-tenant.mdx index 26f73000b3..b353bc85c5 100644 --- a/docs/user-guide/tutorials/prowler-app-multi-tenant.mdx +++ b/docs/user-guide/tutorials/prowler-app-multi-tenant.mdx @@ -67,7 +67,14 @@ The currently active organization is indicated by an **Active** badge. Switching ## Editing an Organization Name -Organization owners with the **Manage Account** permission can rename an organization: +Renaming an organization requires **both** of the following conditions to be met: + +* The user's **membership role** in that organization must be `owner` (visible as the `owner` badge in the Organizations card). +* The user must have a role that grants the **Manage Account** permission. + +Users who only meet one of the two conditions will not see the **Edit** button. For example, a user whose membership role is `member` will not see the **Edit** button even if their role grants `Manage Account`. + +To rename an organization: 1. Navigate to the **Profile** page. @@ -175,6 +182,6 @@ If the expelled organization was the user's **only** organization, the account i | View organizations | Any authenticated user | | Create an organization | Any authenticated user | | Switch organizations | Any authenticated user | -| Edit organization name | Organization owner with **Manage Account** permission | -| Delete an organization | Organization owner with **Manage Account** permission; must belong to more than one organization | +| Edit organization name | Membership role `owner` **and** a role with **Manage Account** permission | +| Delete an organization | Membership role `owner` **and** a role with **Manage Account** permission; must belong to more than one organization | | Expel a user from an organization | Organization owner (no additional permission required); last remaining owner cannot expel themselves |